IT Examiner School

Disaster Recovery Plan Data Centers must have a disaster recovery plan. The plan should address the following: • What constitutes a disaster? • Who gets notified regarding a disaster and how? • Who conducts damage assessment and decides what back-up resources are utilized? • Where are backup sites located and what is done to maintain them on what schedule? • How often and under what conditions is the plan updated? • If the organization does not own the data center what downtime does the service level agreement with the center allow? • A list of people within the organization to notify MUST be maintained

Backup Policy

Regular offsite backups of essential information. • Backup policy in place listing procedure for restoring from backup & testing of such procedures. • Backup must be stored off site.